PDF version

Transcription

PDF version
European Commission – Directorate-General Justice
With financial support from Fundamental Rights and Citizenship Programme
The Analysis of Target Group Needs in Italy and Lithuania
2010-2011
This publication has been produced with the financial support of the Fundamental Rights and Citizenship
programme of the European Commission. The contents of this publication are the sole responsibility of the
Lithuanian consumer institute and CODACONS and can in no way be taken to reflect the views of the
European Commission.
1
CONTENTS
1. The Analysis of Target Group Needs in Italy.............................................................................................3
1.1. Internet Usage ........................................................................................................................................3
1.2. Personal Data..........................................................................................................................................7
1.2.1. Understanding personal data.............................................................................................................7
1.2.2. Publication of personal data on the Internet......................................................................................8
1.2.3. Understanding threats of disclosure of personal data on the Internet .............................................12
1.2.4. Privacy violations on the Internet ...................................................................................................16
1.3. Protection of Personal Data ................................................................................................................19
1.3.1. Measures to ensure better protection of children‘s personal data on the Internet...........................19
1.3.2. Privacy policy ................................................................................................................................22
1.3.3. Implementation of rights of data subjects .......................................................................................25
1.4. Conclusions ...........................................................................................................................................28
2. The Analysis of Target Group Needs in Lithuania..................................................................................34
2.1. Internet Usage ......................................................................................................................................34
2.2. Personal Data........................................................................................................................................38
2.2.1. Understanding personal data...........................................................................................................38
2.2.2. Publication of personal data on the Internet....................................................................................40
2.2.3. Understanding threats of disclosure of personal data on the Internet .............................................44
2.2.4. Privacy violations on the Internet ...................................................................................................46
2.3. Protection of Personal Data ................................................................................................................49
2.3.1. Measures to ensure better protection of children‘s personal data on the Internet...........................49
2.3.2. Privacy policy ................................................................................................................................51
2.3.3. Implementation of rights of data subjects .......................................................................................53
2.4. Conclusions ................................................................................................................................................. 56
Appendix I. Questionnaires............................................................................................................................61
2
1. The Analysis of Target Group Needs in Italy
1.1. Internet Usage
According to the survey results, the most common activities performed on the Internet by young people
are collectiing any kind of information and loading information about themselves and their friends.
Downloading music and films shares almost the same popularity, while chatting with strangers is well known
as risky and it is not performed with frequency (Figure 1).
Every day
Several times a week
Once a month
Several times a year
Collection of information on the Internet
39%
Load (circulation) information about yourself
or your friends (photos, video clips, text
messages and etc.)
39%
Download music, films, etc.
38%
Chat with an unknown person on the Internet
16%
I don't do this
31%
22%
21%
14% 12% 5%
14% 8% 18%
12% 13% 17%
14% 13% 13%
43%
2%
Other activities 8% 4% 3%
0%
20%
84%
40%
60%
80%
100%
Figure 1. How often do children carry out these activities on the Internet?
3
Looking at the graph results (Figure 2), we can state that parents consider that the most frequent activity
that their children carry out is the collection of information on the Internet, while the least frequent is chatting
with an unknown person.
Every day
Several times a week
Once a month
Several times a year
They don't do this
I don't know
Download music, films, etc.
Chat with an unknown person on the Internet
Load (circulation) information about
himself/herself or his/her friends (photos,
video clips, text messages and etc.)
16%
22%
6%3%
3%9%
13% 13% 9%
28%
38%
41%
3%
13%
28%
9% 9%
38%
3%
25%
Collection of information on the Internet
31%
13%
6% 22%
3%
Other activities 3% 6%
0%
88%
20%
40%
60%
80%
100%
Figure 2. Awareness of parents about the activities carried out on the Internet by their children (analysis of
the answers to the question „How often do your children carry out these activities on the Internet”).
The acquired results indicate that FACEBOOK is the most popular social network: 66% of young
people questioned use it every day, 16% many times a week, 7% once a month and 2% many times a year,
while only 9% do not use it at all.
On the opposite side, ORKUT is the least popular, since 97% of the respondents do not use it at all.
Only 2% of young people questioned use ORKUT daily, just one user logs in to it many times a week and
one many times a year.
The unpopularity of the others social networks, as compared with FACEBOOK, is characterized by the
following numbers of users who are not even registered: LINKEDIN (the 96% of young people questioned
4
do not use it at all), FLICKER (94%), FOTOLOG (162), NETLOG (91%), BADOO (83%), MYSPACE
(84%), TWITTER (83%).
Finally, there are young people, among the ones interviewed, who responded that they used other social
networks not listed in the questionnaire. Their use can be expressed in the following measures: daily access
(10%), many times a week (10%), once a month (2%), and many times a year (1%), as shown on Figure 3.
Dayly
Once a month
8,67%
2,31%
7,51%
15,61%
Facebook
Many times a year
82,66%
90,75%
1,16%
0,58%
3,47%
4,05%
Myspace
5,20%
5,78%
1,73%
3,47%
Badoo
1,16%
2,31%
4,62%
5,78%
Orkut
0,58%
0%
0,58%
1,73%
Flickr
1,73%
1,73%
2,31%
0%
Linkedin
2,31%
0%
1,16%
0,58%
Fotolog
0,58%
2,31%
2,31%
1,16%
Others
1,16%
2,31%
0%
I don't use it
65,90%
1,73%
6,36%
1,73%
7,51%
Twitter
Netlog
Many times a week
83,82%
83,13%
97,11%
94,22%
95,95%
93,64%
76,30%
9,83%
10,40%
20%
40%
60%
80%
100%
120%
Figure 3. How often do children these social networks, dating sites?
Parents who participated in the survey were asked whether they were registered users of social networks
/ dating sites (Figure 4). The possible response options were: NETLOG, FLICKR, BADOO, ORKUT,
5
MYSPACE,
LINKEDIN,
TWITTER,
FACEBOOK,
FOTOLOG,
MAMMACHECLUB
and
PARENTSCONNECTS.
38% of the respondents are registered in none of the listed networks; while the ones who use social
network prefer FACEBOOK (59%), BADOO (13%) and MYSPACE (9%).
Similarly, teachers were asked which social networks / dating sites they were registered at (Figure 4).
Majority of the respondents are registered in none of the listed networks (67%); while 30% use FACEBOOK
and a small percentage (7%) are registered in MYSPACE. Only 4% are registered in a social network different
from the ones listed.
Parents
I am not registered
67%
38%
30%
Facebook
59%
7%
9%
Myspace
Badoo
Teachers
0%
13%
Others 0% 4%
0%
Parents connects 0%
Mammacheclub
0%
0%
Fotolog
0%
0%
Twitter
0%
0%
Linkedin
0%
0%
Orkut
0%
0%
Flickr
0%
0%
Netlog
0%
0%
0%
20%
40%
60%
80%
Figure 4. Popularity of social networks and dating sites among parents and teachers (analysis of the
answers to the question “Which of these social networks/dating sites are you a registered user?”)
6
1.2. Personal Data
1.2.1. Understanding personal data
The majority of children (95%) considered that name and surname are the most common personal data,
followed by home address (53%), personal code (47%), mobile phone number (45%), e-mail address (38%),
photos (34%), information related to person’s religious beliefs (16%), information related to health (20%),
and finally father’s name (12%) and school name (12%), as shown on Figure 5.
The totality of the parents (100%) considered that name and surname are the most common personal
data, followed by mobile phone number (75%), home address (53%), e-mail address (41%), photos (34%),
personal code (28%), father’s name (28%), information related to person’s religious beliefs (25%),
information related to health (19%), and finally school name (3%).
The majority of teachers (93%) considered that mobile phone number is the most common personal
data, followed by home address and information related to health (74%), photos (67%), e-mail address
(56%), information related to person’s religious belief (33%), personal code (30%), name and surname (23%)
and finally father’s name (11%). The teachers interviewed have not identified the school name as personal
data (Figure 5).
7
Children
Teachers
23%
Name & surname
100%
94,80%
Mobile phone number
75%
44,51%
Home address
67%
34%
34,10%
E-mail address
41%
38,15%
Health data
56%
74%
19%
20,23%
30%
28%
Personal code
Religious belief
25%
15,61%
11%
Father's name
11,56%
0%
3%
0%
93%
74%
53%
52,60%
Photo
School name
Parents
47,40%
33%
28%
11,56%
20%
40%
60%
80%
100%
120%
Figure 5. Analysis of the children, parents and teachers answers to the question “What, in your
opinion, is personal data?”
1.2.2. Publication of personal data on the Internet
Children were asked to identify the categories of personal data which they provide on Internet websites
(Figure 6). While the majority does not provide this kind of personal data, the ones who do are more likely to
publish their name and surname (24%) as well as their e-mail addresses (21%). It is interesting to underline
the high number of young people that sometimes provide their school name (38%) and extracurricular
activity groups (26%)
8
Always
Extracurricular activity
group
Sometimes
Never
63,01%
27,75%
7,51%
1,73%
66,47%
19,65%
Your faith
Illnesses you have
Often
9,83%
4,05%
86,71%
8,67%
4,05%
0,58%
41,62%
37,57%
School name
11,56%
9,25%
81,50%
14,45%
Home address
1,73%
2,31%
ID number
2,31%
1,16%
84,39%
12,14%
16,76%
E-mail address
43,93%
17,92%
21,39%
59,54%
32,95%
Telephone number
4,62%
2,89%
10,98%
Name & surname
45,09%
20,23%
23,70%
0%
20%
40%
60%
80%
100%
Figure 6. Which information about themselves do children provide on Internet sites?
The survey indicated that 52% of children aged 13-18 have answered “sometimes” to the question “Do
you provide correct personal data - name, surname, date of birth, etc. - when registering in various sites on
the Internet?”.
Only 14% never provide their personal data, while the 10% always do. Between these opposite habits,
there is a percentage of 11% of young people that do not register when they are asked to provide their
personal data besides 13% that offer this information quite often (Figure 7).
9
If I am asked to
provide my
personal data, I
don't do it 11%
Always 10%
Often 13%
Never 14%
Sometimes 52%
Figure 7. Analysis of children’s answers to the question “Do you provide correct personal data name, surname, date of birth, etc. - when you register on various Internet websites?”
As it comes to providing correct (unfabled) information to those with whom children socialise online,
39% of children who participated in the survey answered that they do it sometimes, while 27% never do. The
ones who always provide their real personal data comprise 19% of survey participants and the ones who do it
often are 15%. Therefore, the majority of the young people questioned provide real information about
themselves while communicating in the Internet, even if with different frequency (Figure 8).
Always 19%
Never 27%
Often 15%
Sometimes 39%
10
Figure 8. Analysis of children’s answers to the question “When communicating on the Internet (for
ex. in social networks or dating sites) do you provide correct information about yourself for those with
whom you socialise?”
As seen on Figure 9, the research indicates that 35% of children receive consent from their friends just
sometimes to share their personal data (photos, information about certain details of their lives) on the
Internet, while 25% always ask for consent and 13% do it often. Finally, we have similar percentages of
young people who think it is not necessary to ask for consensus of their friends (15%) and who do not
publish data of other people (12%).
I do not publish
my friend data
12%
Sometimes 35%
Often 13%
I don't think it is
necessary 15%
Always 25%
Figure 9. Analysis of children’s answers to the question “Do you receive a consent from your friends
before publishing their personal data (photos, information about certain details of their lives) on the
Internet”?
59% of the parents responded that they never publish information related to their daughter's/son's
personal data (their photos, information on certain details of their lives) on the Internet, while only 35% do it
sometimes. Just 6% do it often (Figure 10).
Absolute majority of teachers (89%) responded that they never publish information related to
schoolchildren's personal data (their photos, information on certain details of their lives) on the Internet,
while 11% acknowledged that they do it sometimes (Figure 10).
11
Always
Teachers
Parents
Often
11%
6%
0%
Sometimes
Never
89%
34%
20%
59%
40%
60%
80%
100%
Figure 10. How often teachers publish information related to their children/schoolchildren personal
data (their photos, information on certain details of their lives) on the Internet.
1.2.3. Understanding threats of disclosure of personal data on the Internet
Almost all children intervieweed (85%) have identified as the most possible threat the misappropriation
of identity in order to make a purchase or perform, for example, cash transactions on behalf of another
person. Furthermore, 58% of young people think that personal data such as photos can be used for
advertising or can be placed in erotic websites. The following risk feared by 53% of the respondents is the
use of personal data for commercial purposes.
Other possible threats, identified respectively by 49% and 46% of the interviewed, are electronic
harassment to intimidate another person or to cause tension and unsolicited advertising and commercial
messages (SPAM).
A small number of young people, only 8%, do not think that there are any threats, while 2% have
identified menaces different from the ones listed (Figure 11).
63% of parents have identified “the electronic harassment to intimidate another person or to cause
tension” as the most common threat. Besides, the following threats feared by the respective number of
respondents are: misappropriation of identity in order to make a purchase or perform, for example, cash
transactions on behalf of another person (59%); use of personal data for commercial purposes (59%); use of
photos for advertising or erotic websites (56%); and reception of unsolicited advertising and commercial
messages, mostly known as SPAM (53%). Finally, 9% of the respondents think that there is no menace at all
(Figure 11).
12
Almost 70% of teachers interviewed as part of the survey have identified as the most common threats:
misappropriation of identity in order to make a purchase or perform, for e.g., cash transactions on behalf of
another person and reception of unsolicited advertising and commercial messages (SPAM). The majority
(63%) also think that personal data could be used for commercial purposes. Furthermore, 56% of the
respondents believe that photos could be used for advertising or could be placed in erotic websites. The
following threat feared by 37% of the respondents is the electronic harassment to intimidate another person
or to cause tension. Finally, only 4% think that there is no menace at all.
Responses received from service providers to the question on possible threats associated with the
personal data disclosure indicate that almost all of the interviewed (86%) have identified as the most possible
threat the misappropriation of identity in order to make a purchase or perform, for example, cash transactions
on behalf of another person. Furthermore, 64% of data controllers think that electronic harassment to
intimidate another person or to cause tension is a quite common menace. The following risks feared by the
respondents are, in order of importance, circulation of personal photos for advertising or erotic websites
(57%); use of personal data for commercial purposes (50%) and reception of unsolicited advertising and
commercial messages, mostly knows as SPAM (43%). None of the questioned have selected the response
option “I don’t think there are any threats” (Figure 11).
13
Children
Parents
Teachers
Service Providers
Misappropriation of identity in order to make
a purchase or perform, for ie, cash
transactions on behalf of another person
86%
70%
59%
85%
50%
Use of personal data for commercial
purposes
63%
59%
53%
64%
Electronic harassment to intimidate another
person or to cause tension
37%
63%
49%
43%
Unsolicited advertising and commercial
messages (SPAM)
70%
53%
46%
57%
56%
56%
58%
Photos, used for advertising or placed in
erotic websites
I don’t think there are any threats
Others
0%
4%
9%
8%
0%
0%
0%
2%
0%
20%
40%
60%
80%
100%
Figure 11. Opinion of children on possible threats associated with the personal data disclosure on the
Internet.
Parents are almost equally divided between 44% who haven’t discussed with their children the subjects
of privacy, personal data and threats associated with the personal date disclosure on the Internet and 41%
who have talked about personal data disclosure. There are also 12% of parents who said it has not been
necessary since their children were already aware. Finally, only 3% of the respondents do not think that is
important (Figure 12).
33% of teachers have discussed with their schoolchildren the subjects of privacy and threats of personal
data disclosure on the Internet, while 26% never had. Furthermore, 26% of the teachers think that it is not
their responsibility, 11% said it has not been necessary since the schoolchildren were already informed and
just 4% of the questioned do not consider that it is an important matter (Figure 18).
14
Yes
No
I don't think it is important
There was no need as they already knew about it
It is not under my responsability
Teachers
33%
26%
41%
Parents
0%
20%
4%
11%
26%
44%
40%
60%
3%
80%
13%
100%
Figure 12. Analysis of the answers of parents and teachers to the question “Have you ever talked on
privacy, personal data and threats associated with the personal data disclosure on the Interne with the
children/schoolchildren?”
66% of parents do not think that young people have enough knowledge on possible threats associated
with the personal date disclosure on the Internet. Besides, only 9% of the parents interviewed believe that
young people are quite informed. Finally, 25% do not know about young people’s knowledge of possible
threats of personal data disclosure (Figure 13).
44% of teachers do not think that young people have enough knowledge on possible threats associated
with the personal date disclosure on the Internet. Besides, 30% of the teachers believe that young people are
quite informed. Finally, 26% of the respondents do not know young people’s knowledge of the possible
threats of personal data disclosure (Figure 13).
15
Yes
Teachers
30%
Parents
I don't know
44%
9%
0%
No
26%
66%
20%
40%
25%
60%
80%
100%
Figure 13. Analysis of parents’ and teachers’ opinion about children knowledge on possible threats
associated with the personal date disclosure on the Internet.
1.2.4. Privacy violations on the Internet
From the analysis of the data presented in the summarizing table (Figure 14), we can state that the
majority of the respondents among children have never experienced directly big threats to their privacy. In
fact, the most common case has been circulation of photos or videos on the Internet without previous
consent.
16
Yes, more than once
Yes, once
No
Child received an unwanted proposal by
phone or e-mail
This has happened to my friends
17%
15%
62%
Child's identity was misappropriated 5%10%
75%
False information about the child was
10% 9%
circulated on the Internet
68%
Having no consent child's photo or video clip
7% 9%
was circulated on the Internet
Having no consent child's name and
surname, home address and etc. was
circulated on the Internet
10%
13%
78%
20%
0%
5%
18%
20%
6%
52%
40%
60%
10%
80%
100%
Figure 14. How often did children experience indicated cases.
From the analysis of the data presented, we can state that the majority of parents were not so sure if any
of the listed cases (Figure 15) had ever happened to their son/daughter.
17
Yes, more than once
Yes, once
Child received an unwanted proposal by
phone or e-mail
No
13% 3%
28%
Child's identity was misappropriated 0%
3%
34%
False information about the child was
3%
3%
circulated on the Internet
28%
Having no consent child's photo or video clip
3%
3%
was circulated on the Internet
56%
62%
66%
41%
Having no consent child's name and
surname, home address and etc. was 9%3%
circulated on the Internet
0%
I don't klnow
53%
34%
20%
53%
40%
60%
80%
100%
Figure 15. Analysis of the answers of parents to the question „Has your son/daughter ever faced these
cases?”
From the analysis of the data presented below (Figure 16), we can state that the majority of teachers do
not know any direct case of big threat to their schoolchildren’s privacy. In fact, the most common case has
been circulation on the Internet of false information about one of their schoolchildren.
18
Yes, more than once
Yes, once
No
This has happened to my son/daughter
Child received an unwanted proposal by
7%
phone or e-mail
93%
Child's identity was misappropriated 7%
93%
False information about the child was
circulated on the Internet
15%
Having no consent child's photo or video clip
was circulated on the Internet
33%
19%
Having no consent child's name and
surname, home address and etc. was
circulated on the Internet
19%
30%
0%
52%
20%
63%
22%
40%
37%
60%
11%
80%
100%
Figure 16. Analysis of the answers of teachers to the question „Are you aware of such cases?”
1.3. Protection of Personal Data
1.3.1. Measures to ensure better protection of children‘s personal data on the Internet
A high number of children (65%) have identified diffusion of a “Safe Internet” idea as the best measure
to protect their own data. This strategy is followed in effectiveness by formal and informal education of
children, for example through awareness-raising campaigns (54%); an enhanced personal responsibility of
the user (52%); a greater responsibility of website administrators (50%); implementation of better laws
(36%); use of programs limiting browsing on the Internet according to the keywords (27%) and a stricter
parental control over their children (16%), as seen on Figure 17.
The same question (Which of the measures could ensure better protection of childrens' personal data on
the Internet?) was given to the parents. 84% of the respondents have identified the formal and informal
education of children as the best measure to protect young people’s personal data. This strategy is followed
in effectiveness by: a greater responsibility of website administrators (53%); implementation of better laws
(53%); use of programs limiting browsing on the Internet according to the keywords (41%); propagation of a
19
“Safe Internet” idea (41%); an enhanced personal responsibility of the user (19%) and finally a stricter
parental control over their children (9%) (Figure 17).
As it comes to teachers, they identified formal and informal education of children (59%) and
propagation of a “Safe Internet” idea (56%), as the best measures to protect their schoolchildren data. These
strategies are followed in effectiveness by greater responsibility of website administrators (48% of the
questioned); implementation of better laws (44%); a stricter parental control over their children (41%); use of
programs limiting browsing on the Internet according to the keywords (37%). Finally, 15% of the
interviewed believe that the better way of protection is to enhance personal responsibility of the user (Figure
17).
64% of serivice providers believe that formal and informal education of children, for example through
awareness-raising campaigns, as well as the propagation of a ‘Safe Internet’ idea, are the measures that could
better contribute to young people data protection. These strategies are followed in effectiveness by greater
responsibility of website administrators (50%); implementation of better laws (43%); enhanced personal
responsibility of the user (36%); use of programs limiting browsing on the Internet according to the
keywords (21%) and stricter parental control over children (21%) (Figure 17).
20
Children
Parents
Teachers
Service Providers
64%
59%
Formal and informal education of children,
such as awareness-raising campaigns
84%
54%
36%
15%
19%
Personal responsibility of the user
52%
21%
Stricter parental control over children
41%
9%
16%
50%
48%
53%
50%
Greater responsibility of website
administrators
43%
44%
Better laws
53%
36%
21%
Programs limiting browsing on the Internet
according to the keywords
37%
41%
27%
64%
Propagation of ‘Safe Internet’ idea
41%
56%
65%
0%
20%
40%
60%
80%
100%
Figure 17. Which measures could ensure better protection of children's personal data on the Internet?
All service providers that participated in the survey have identified educational measures as the most
insufficient ones. Besides, 29% have selected legal measures as second response option. High percentages of
interviewed have identified lacks in respectively organizational (57%) and self-regulation measures (43%).
Finally, only 14% of the respondents have stressed the need to improve technical measures (Figure 30).
21
Educational
100%
86%
Legal
Organizational
57%
43%
Self-regulation
Technical
14%
0%
20%
40%
60%
80%
100%
120%
Figure 18. Measures which according to service providers should be improved in order to guarantee
comprehensive personal data protection on the Internet.
1.3.2. Privacy policy
Less than half of the questioned children (34%) always familiarize themselves with website’s privacy
policy. 27% do it some times, while 16% familiarize often. There is still quite high percentage (18%) who
never read privacy policies. Finally, 5% of the respondants think that it is not necessary (Figure 19).
22
I don't think it is
necessary 5%
Never 18%
Always 34%
Sometimes 27%
Often 16%
Figure 19. Analysis of the answers of children to the question „Do you, when publishing information
related to your own or your friend’s personal data on the Internet, familiarize with the website’s privacy
policy (how and what for personal data may be used, what are your rights, responsibility and etc.) or set
privacy settings?”
The majority of parents (almost 60%) never familiarize themselves with website’s privacy policy
while, on the other side, only 6% do it always. The remaining part of the questioned are divided into 22%
who familiarize themselves sometimes, 10% who do it often and 3% who do not think it is necessary (Figure
20).
As it comes to teachers, the majority of the questioned (85%) never familiarize with the website’s
privacy policy. On the other side, 15% does it always (Figure 20).
23
Always
Teachers
Parents
Often
Sometimes
Never
15%
6%
0%
I don't think it is necessary
85%
9%
22%
10%
20%
30%
59%
40%
50%
60%
3%
70%
80%
90%
100%
Figure 20. Analysis of the answers of parents and teachers to the question „Do you, when publishing
information related to your daughter’s/sun’s/schoolchildren’s personal data on the Internet, familiarize with
the website’s privacy policy (how and what for personal data may be used, what are your rights,
responsibility and etc.) or set privacy settings?”
58% of the data controllers interviewed have declared that they have a privacy policy. The remaining
42% do not have it but plan to have in the future (Figure 21).
Yes, I have it
57%
No, but I plan to have
it in the future
No, I don't have it
42%
0%
I don't think it is
0%
necessary
0%
20%
40%
60%
Figure 21. Answers of service providers to the question “As a controller of an Internet site, do you
have a privacy policy?”)
24
1.3.3. Implementation of rights of data subjects
Survey participants were asked who in their opinion should familiarize children with the possible
infringements of personal data on the Internet and remedies to avoid them (Figure 22). According to
children‘s responses to the question, this task should mainly concern parents (option selected by 73%),
followed by teachers (51%), the media (42%), the manager of the web site (38%), the State Data Protection
Inspectorate (37%), friends (16%), and NGOs (9%). It is interesting that 34% think that young people should
have interest themselves.
75% of parents agree that this task mainly concerns teachers. 59% have chosen media as their second
response option. Furthermore, responsibility to raise aware of young people should also interest parents
(option selected by 56%), managers of websites (31%), NGOs (25%), the State Data Protection Inspectorate
(25%) and friends (16%). Finally 13% of parents have stressed that young people should get interested
themselves.
According to teachers, the task to familiarize children with with the possible infringements of personal
data on the Internet mainly concerns parents (option selected by 70%), followed by the State Data Protection
Inspectorate (63%), a manager of the website (59%), media (52%) and finally teachers (44%). 11% believe
that young people should have interest themselves. No one has identified either friends or NGOs as
responsible to raise awareness among their peers or young people.
According to service providers’ responses, this task mainly concerns teachers (option selected by 86%
of the respondents), followed by parents (71%) and young people themselves (57%). The same percentage
(29%) of respondents identified media and the State data protection Inspectorate as responsible to raise
awareness of young people. Also friends and web site managers share the same percentage of responsibility,
according to 14% of the respondents. No one has selected NGOs as possible awareness subjects.
25
Children
Parents
Teachers
Service Providers
Parents
71%
70%
56%
73%
86%
44%
Teachers
75%
51%
29%
52%
The media
42%
29%
State Data Protection
Inspectorate
63%
25%
37%
14%
Manager of the
website
31%
Children should have
interest themselves
59%
38%
57%
11%
13%
34%
14%
Friends 0%
Non-governmental
organizations
59%
16%
16%
0%
0%
25%
9%
0%
0%
Others 0%
1%
0%
10%
20%
30%
40%
50%
60%
70%
80%
90%
Figure 22. Analysis of the answers to the question „Who do you think should familiarize children with
the possible infringements of personal data on the Internet and remedies to avoid them?”
31% of the parents interviewed would address firstly to the State Data Protection Inspectorate. 28%
would contact the Court; 19% would report to the Children’s Rights Ombudsman Institution; 16% would
refer to the manager of the website responsible of the data violation. Finally, 6% of the respondents would
address to subjects different from the ones listed in the survey response options (Figure 23).
41% of the teachers interviewed would address firstly to the State Data Protection Inspectorate and
26% to the manager of the website responsible of the data violation. 7% would contact a Court or the
Children’s Rights Ombudsman Institution. Finally, 19% of the teachers interwieved would not contact
anybody, since they think that it is not their responsibility (Figure 23).
26
Parents
Teachers
41%
State Data Protection Inspectorate
31%
26%
Manager of the website
16%
7%
Court
28%
7%
Children’s Rights Ombudsman Institution
Other institution
I would not contact nobody, because it is not
upon my responsibility
19%
0%
6%
19%
0%
0%
10%
20%
30%
40%
50%
Figure 23. Analysis of parents’ and teachers’ answers to the question “Whom would you firstly contact
yourself (or recommend for a schoolchild to contact) in case his/her right to the protection of personal data
was breached?”
Web users refer to the data controllers interviewed mostly to ask them to provide information on which
personal data are collected and from which sources are processed (71% of the respondents). With the
same frequency, web users address to data controllers willing to withdraw consent to process their personal
data (71%). 57% of the respondents are mostly asked to explain the purposes for which personal data are
collected and to erase users’ personal data or terminate any operations of processing upon personal data.
Finally, 36% of the respondents are frequently asked to correct inaccurate, incomplete or incorrect personal
data, while only 7% have never received questions by web users on use of their data (Figure 24).
27
Willing to withdraw the consent to process
his personal data
71%
To provide information from which sources
and which personal data are collected and
processed
71%
To erase his personal data or terminate any
operations of processing upon personal data
57%
To explain the purposes for which his
personal data are collected
57%
To correct inaccurate, incomplete or
incorrect personal data
36%
No data subject referred to me yet
7%
0%
20%
40%
60%
80%
Figure 24. Data subjects’ requests to service providers
1.4. Conclusions
1.4.1. Internet Usage
1.4.1.1. Children activities on the Internet and Usage of social networks
As regards activities performed by children on the Internet the most popular ones with daily frequency
are: collection of information (39%), load (circulation) of information about themselves or their friends
(39%) and download of music and films (37%). Of these activities, the load and circulation of personal
information on the Internet is the only one at risk of infringements of the users’ and their friends’ privacy. In
Italy, chatting with unknown person is not a prime danger, since 43% of children involved in the survey have
declared that they never do it, while only 16% do it every day.
The survey showed a large and widespread use of social networks among children. The most popular
one is Facebook as 66% respondents use it every day. If we refer to the most common use of Facebook
(sharing of photos, personal information, habits, activities and events to which the user will assist), we can
connect the children’s use of Facebook to the above mentioned load/circulation of information. Thus, a
28
potential risk is the misappropriation of children’s personal data and their use for illegal purposes which
could go from the infringements of their rights to more serious crimes.
Responses by parents to the question of how often their children perform such activities reveal that
majority of the parents have no clues about it. In this regard, it is representative that many of the interviewed
parents do not know if their children chat with unknown people (41%) or load information about themselves
and their friends (37%). The only activity that 31% of the parents recognize that their children perform with
high frequency (several times a week) is the collection of information on the Internet.
Furthermore, adults involved in the survey (both parents and teachers) do not share with children the
knowledge on how to use Internet to socialize with other people: this is an important intergenerational gap.
As regards the adults’ use of social networks, 59% of parents use Facebook and 37% are not registered in any
social network; 67% of teachers are not registered in any and 30% of teachers use Facebook.
Based on these data, it is important to underline the need for a greater involvement of adults in
children’s usage of the Internet, both as it comes to interest in the activities children perform (especially in
the case of parents) and awareness of the potential risks linked to such activities (to be raised by parents and
teachers). Children should be deeply and clearly informed on the possible consequences of their incorrect or
unlimited use of Internet (with respect to publication of personal data) and should be given behavioural paths
to protect themselves and their friends. The main limitation is that adults close to children may not be totally
aware of the possible risks their children incur, due to their limited use of Internet as to the generational gap
regarding the activities performed on Internet. For these reasons, we believe that involvement of public and
private institutions and NGOs operating in the field of protection of minors and consumers is extremely
necessary. These stakeholders should address their awareness activities towards children directly or indirectly
(through parents and teachers). Even though, parents should adopt the habit of talking with their children
appealing to a reciprocal dialogue on these subjects; while, on the other side, teachers should complement the
parents’ effort by dealing with these problematic issues within the educational context.
1.4.2. Personal Data
1.4.2.1. Understanding personal data
The answers to the question “What, in your opinion, is personal data?” disclosed a great difference in
the respondents’ opinions (children, parents and teachers). 100% of answers have been assigned only to name
and surname and exclusively by parents’ group; 95% of the children marked this option and only 23% of the
teachers identified this information as personal data. If we consider that all the answer options provided by
29
the survey were personal data, no identification from the interviewed of some of them is significant and
brings to light the need to raise awareness of children, parents and teachers on the definition of personal data.
The most striking fact which can support our argument is that school name has been identified as personal
data only by 12% of the children; even more shocking is that none of teachers have marked this option!
1.4.2.2. Publication of personal data on the Internet
In correlation to what was underlined in the previous section, we have to indicate that the children who
took part in the survey are not likely to publish their personal data on the Internet. Even though, a small
percentage of those who do, provide information such as school name (38%), membership to extracurricular
activity groups (26%) and name and surname (24%). These are obviously key information which could
enable a evil-minded person to misappropriate the child identity or to know exactly where to find him/her
and when.
Other alarming data in this respect comes from the question if they provide correct personal data when
registering in various sites on the Internet: 52% of the children answered “sometimes”, while only 14% never
do and 11% do not register when asked to provide this information. Furthermore, the majority of them
provide real information about themselves while communicating in social networks or dating sites (39% do it
sometimes and 19% do it often). Finally, it is important to note that 15% of the children don’t think that it is
necessary to get their friends’ consent before publishing their personal data (photos, information about
certain details of their lives) on the Internet while, on the other side, 35% always ask for it.
If children usually publish personal data about themselves and their friends, adults do not share the
same habit. 59% of parents and 89% of teachers never circulate on the Internet information about their
children/students. Even though, this could be simply due to the fact that adults are not likely to use social
networks.
1.4.2.3. Understanding threats of disclosure of personal data on the Internet
Even if children, parents, teachers and service providers have ranged differently the listed possible
threats associated with the personal data disclosure on the Internet, almost all options have scored high
percentages. In particular, children (85%), teachers (70%) and service providers (86%) agreed that the most
possible risk is the misappropriation of identity in order to make a purchase or perform, for i.e., cash
transactions on behalf of another person; while the prime threat identified by parents (63%) is the electronic
harassment to intimidate another person or to cause tension. Though a general awareness has been detected,
30
more actions must be released to inform all target groups on other possible menaces not included in the list,
and especially to advert the ones who have not marked any threat (8% of children, 9% of parents and 4% of
teachers). It is significant to note that none of the service providers, who are the ones that mostly handle this
issue, has selected the answer “I don’t think there are any threats”.
The scene is more worrying if we refer to the involvement of parents and teachers in the familiarization
of children with privacy policies and potential threats. The majority of parents (59%) and of teachers (67%)
have not talked with children about these topics, regardless the reason why (someone thinks it is not
important, others that it is not their responsibility or that children are already aware). It is even worse if we
take into account that this lack of dialogue is present despite many parents (66%) and teachers (44%), do not
think that children have enough knowledge on possible threats associated with the personal data disclosure
on the Internet. As already stressed, the involvement of adults in warning children is urgent and necessary.
1.4.2.4. Privacy violations on the Internet
When referring to direct or close experiences of violations (such as circulation of photos and personal
data without consent or false information, misappropriation of identity, reception of unwanted proposals by
unknown people), the majority of the children interviewed have never faced big threats to their privacy. In
fact, the most common case has been the circulation of photos or video clip on the Internet without previous
consent (20%). Neither parents nor teachers’ have showed sufficient awareness on these violations happening
to their children or students and this should be object of work to get an improvement in their participation.
1.4.3. Protection of Personal Data
1.4.3.1. Measures to ensure better protection of children’s personal data on the Internet
Mostly all the measures, listed in the survey, to ensure better protection of children’s personal data on
the Internet have been marked as necessary by each target group, even if with a different scale of priority.
The ones that have been identified as the most effective to implement are: diffusion of a “Safe Internet” idea
– option selected by 65% of the children themselves and 64% of service providers) and formal and informal
education of children (by 84% of parents and 59% of teachers). The need of awareness raising campaigns has
been stressed too, together with enhanced responsibility of both the website administrators and the users.
Implementation of better laws would surely help to make the website administrators to assume their
responsibility. On the other hand, a stricter parental control would overburden children without getting
results and this is why it should be replaced by more interactive educational tools. In this regard, the service
31
providers have remarked that educational (33%) and legal (29%) measures are the most insufficient ones.
This accords with the perception of parents and teachers.
1.4.3.2. Privacy policy
If we consider that 42% of service providers interviewed do not have a privacy policy, we can
understand why users (both children and adults) are not familiarized with it. Only 16% of children get
informed on the website’s privacy policy or set privacy settings when publishing information about
themselves or their friends. Even worse, 60% of parents and 85% of teachers never do while publishing
personal data of their children/students!
The need of more commitment from service providers is evident as the legal obligation to have a
privacy policy. On the other hand, parents need to adopt the habit to control how and what personal data may
be used, what are user rights, responsibilities and so on, in order to transfer this knowledge and positive
attitude to their children/students.
1.4.3.3. Implementation of rights of data subjects
When asked to indicate who should familiarize children with the possible infringements of personal
data on the Internet and remedies to avoid them, all the target groups have given the prime responsibility to
the people naturally charged to educate children: parents (73% of the children and 70% of the teachers) and
teachers (75% of the parents and 86% of the service providers). If we cannot blame children for their choice,
we should at least notice that this crossed responsibility teachers / parents is a leitmotif that comes out in
almost every discussion regarding educational issues. A surprising absence is that of the NGOs which are
probably not identified as stakeholders in this field; this means that they should get involved with more
emphasis in the promotion of the respect for children’s privacy on the Internet, may be organizing the
awareness and educational activities requested by the target group interviewed and therefore release the
parents’ and teachers’ burden.
If we move to the responsibility of protection once the children’s right to personal data has been
breached, parents (31%) and teachers (41%) agrees pointing to the State Data Protection Inspectorate and
leaving in a second place the website’s manager. This selection reflects their identification with the legal
process of accusation. In the answers of teachers we can detect also a low interest in the protection of their
students’ rights, since 19% declared that this task is not upon their responsibility. The teachers’ involvement
should be strongly motivated, based on the assumption that they are an important referral for their students.
32
Service providers have also registered direct requests from users regarding the management of their
personal data. According to the respondents, users show concern mostly on which personal data are collected
and from which sources are processed (71%), as for which purposes (57%). Other users’ complaint are linked
to the willing to withdraw the consent to process their personal data (71%) and to erase their personal data or
terminate any operations of processing upon them (57%).
33
2. The Analysis of Target Group Needs in Lithuania
2.1. Internet Usage
According to answers of children, the most popular activities carried out by them on the Internet are
downloading music, films and etc. (39% do it every day, 37% - several times a week), and collecting
information (22% do it every day, 45% - several times a week). Taking into account activities carried on the
Internet that could lead to the most serious infringements of the privacy, safety or other rights of children, the
results of the survey showed that 20% of children load (circulate) information about themselves or their
friends, 19% chat with unknown persons several times a week, but there is also clear trend that 28% and 40%
respectively don’t do this at all (Figure 1).
Every day
Several times a week
Download music, films
and etc.
Once a month
Several times a year
39%
Collect information on
the Internet
37%
22%
Carry out other
activities
17%
Chatting with the
unknown person
10%
Load information
about himself/herself
or his/her friends
8%
0%
12% 4% 8%
45%
11%
19%
20%
20%
21%
8% 4%
16%
27%
40%
Don't do this at all
5% 6%
60%
15%
40%
16%
60%
28%
80%
100%
Figure 1. How often do children carry out these activities on the Internet.
The survey showed that younger children (13-14 years old) are less minded to load (circulate)
information about themselves or their friends on the Internet - 38% don’t do this at all, whilst among elder
children only 21% and 19% don’t do this at all (Figure 2).
34
Every day
Several times a week
17-18 years old
11%
15-16 years old
8%
13-14 years old
7%
0%
Once a month
21%
31%
22%
18%
Several times a year
19%
31%
22%
20%
Don't do this at all
19%
17%
21%
15%
40%
38%
60%
80%
100%
Figure 2. How often do children load (circulate) information about himself/herself or his/ her friends on the
Internet.
As regards chatting on the Internet with unknown person, the situation is very similar – 50% of children aged
13-14 years said that they don’t do this at all, whilst among elder children this number is 35% and 30% by
respective age groups (Figure 3).
Every day
Several times a week
17-18 years old
13%
15-16 years old
9%
13-14 years old
9%
0%
Once a month
23%
18%
23%
15%
20%
17%
14%
Several times a year
17%
30%
16%
12%
40%
Don't do this at all
35%
50%
60%
80%
100%
Figure 3. How often do children chat with the unknown person on the Internet.
As regards awareness of parents about the activities carried out on the Internet by their children,
58% of respondents said that most often – every day - their children collect information on the Internet,
47% said that several times a week their children download music, films and etc. With respect to
35
activities that could cause the most significant danger to children’s right to privacy and other rights, 30%
of parents said that children load (circulate) information about themselves or their friends, 22% – that
they chat with unknown persons several times a week. 22% and 31% of parents respectively don’t know
whether their children carry out these activities or not (Figure 4).
In comparison, two times as few (22%) children said that they collect information on the Internet
every day (Figure 1). As regards other activities, there is not such considerable difference between
answers of parents and children.
Every day
Several times a week
Once a month
Several times a year
Don't do this at all
Don't know
1%
Collect information on
the Internet
58%
Download music, films
and etc.
32%
23%
Chatting with the
unknown person
47%
18%
Load information
about himself/herself
or his/her friends
22%
13%
0%
5% 7%
30%
20%
7% 4%5%
13%
16%
31%
8%
19%
40%
4% 4%
60%
7%
22%
80%
100%
Figure 4. Awareness of parents about the activities carried out on the Internet by their children (analysis of
the answers to the question „How often do your children carry out these activities on the Internet”).
The survey showed that 53% of respondents among children daily use international social
network Facebook, 21% use Lithuanian website One.lt or other unspecified social networks and dating sites
(Figure 5). Other specified social networks and dating sites, such as Frype.lt, Klase.lt, Twitter and etc., are
quite less popular – only 2-3% of respondents said that they use these sites.
36
Facebook
53%
One.lt
21%
Draugas.lt
4%
Pazintys.lt
3%
MySpace
3%
Twitter
3%
Frype.lt
2%
Klase.lt
2%
LinkedIn
2%
Others
21%
0%
10%
20%
30%
40%
50%
60%
Figure 5. Analysis of the answers of children every day using specified social networks and dating sites.
According to Figure 6, the most popular websites among parents and teachers are Facebook
and Klase.lt – more than half of respondents are registered users of these websites. 32% of teachers and 28%
of parents also use One.lt, 21% and 14% respectively – Draugas.lt. 20% of parents and 24% of teachers do
not use websites of such type at all. In conclusion, the majority of adults use social networks or dating sites,
so they should be quite aware about the peculiarities of such types of websites.
37
Parents
Teachers
65%
Klase.lt
53%
53%
Facebook
58%
32%
One.lt
28%
Draugas.lt
21%
14%
9%
Supermama.lt
15%
12%
Frype.lt
6%
3%
4%
LinkedIn
MySpace
6%
1%
Pazintys.lt
3%
3%
Twitter
3%
2%
Other
18%
4%
Don't register
20%
0%
10%
20%
24%
30%
40%
50%
60%
70%
Figure 6. Popularity of social networks and dating sites among parents and teachers (analysis of the
answers to the question “Which of these social networks/dating sites are you a registered user?”)
2.2. Personal Data
2.2.1. Understanding personal data
The majority of respondents among children (87%) considered that name and surname, is the
most common personal data, followed by personal code (81%), home address (67%) and mobile phone
number (51%).
The vast majority of the interviewed teachers (97%) considered personal code and name, surname as
the most common personal data. 91% said that the home address and mobile phone number is personal data.
As regards answers of parents, 97% of them said that personal code is personal data, 87% indicated
name and surname, 82% - home address, 73% - mobile phone number, 71% - photo and 63% - e-mail
address.
38
The minority of respondents treats school name, information related to person’s religious beliefs,
father’s name as personal data.
The most different opinions of the children and of the adults were on the information related to health –
this kind of information was indicated as personal data by 22% of children and by 61% and 74% respectively
of parents and teachers. Quite big difference of views was concerning father’s name (17% of children, 45%
of parents, 38% of teachers), photo (38% of children, 62% of parents, 71% of teachers), e-mail address (35%
of children, 63% of parents, 65% of teachers), mobile phone number (51% of children, 73% of parents, 91%
of teachers) (Figure 7).
Children
Parents
Teachers
Personal code
97%
97%
81%
97%
Name, surname
87%
87%
82%
Home address
91%
67%
Mobile phone number
73%
91%
51%
62%
Photo
71%
38%
65%
63%
E-mail address
35%
61%
Health data
74%
22%
38%
Father's name
45%
17%
32%
Religious beliefs
40%
17%
24%
School name
37%
20%
0%
20%
40%
60%
80%
100%
120%
Figure 7. Analysis of the children, parents and teachers answers to the question “What, in your opinion, is
personal data?”
Comparing children’s answers according to age groups (Figure 8), the same part (87%) of respondents
of every age group was of the opinion that personal data is name and surname.
39
The most different opinions were concerning information related to health – 18% among children aged
13-16 years and twice more - 39% - among children aged 17-18 years, while the most similar responses were
on school name (the difference between answers of different age groups is 1 and 2 percent).
The common trend is that elder children (aged 17-18 years) have better understanding of personal data
– as regards all listed categories of personal data, positive answers of this age group exceed these of other
groups of age.
13-14 years old
15-16 years old
17-18 years old
87%
87%
87%
Name, surname
Personal code
76%
66%
64%
Home address
Mobile phone number
49%
50%
36%
36%
Photo
E-mail address
31%
34%
20%
18%
Health data
83%
89%
73%
59%
46%
46%
39%
21%
19%
20%
School name
Father's name
15%
16%
Religious beliefs
15%
16%
0%
20%
23%
23%
40%
60%
80%
100%
Figure 8. Analysis of answers of the children of different age groups to the question “What, in your opinion,
is personal data?”
2.2.2. Publication of personal data on the Internet
Children were asked to identify the categories of personal data which they provide on Internet websites.
The results showed (Figure 9) that the majority of children (more than 70%) never share their personal
identification number, home address and information related to their religion and illnesses. On the other
40
hand, the most revealed personal data appeared to be name and surname (92%) and email address (87%).
Extracurricular activities, school name and telephone number are shared by almost half of the children.
Personal identification number
91%
Illnesses
91%
Religion
82%
Home address
73%
Extracurricular activities
60%
School name
42%
40%
Telephone number
E-mail
13%
8%
Name, surname
0%
20%
40%
60%
80%
100%
Figure 9. Information which is not shared (kept secret) by the children on Internet websites
The survey indicated that the vast majority of 13-18 years old children provide correct personal data
when they register on various Internet websites. Only 11% of children indicated that they never do that and
4% admitted that they do not register on Internet websites if they are asked to enter personal information
(Figure 10).
41
Never
11%
Sometimes
40%
If I am asked to
provide my
personal data I do
not register
4%
Always
17%
Often
28%
Figure 10. Analysis of children answers to the question “Do you provide correct personal data - name,
surname, date of birth, etc. - when you register on various Internet websites?”
The survey showed that more than half of the children (57%) often or sometimes invent information or
give false data to people with whom they communicate online. In comparison, 26% of the children provide
correct information about themselves and 17% of the children never say truth or provide correct data on the
Internet (Figure 11).
Never
17%
Always
26%
Sometimes
28%
Often
29%
Figure 11. Analysis of children answers to the question “When communicating on the Internet (for ex. in
social networks or dating sites) do you provide correct information about yourself for those with whom you
socialise?”
42
36% of the children stated that they never publish personal data of their friends on the Internet. From
those who publish the personal data of their friends and other people they know, 23% always receive a
consent from a person concerned (data subject), while 11% do not think that it is necessary (Figure 12).
I do not publish
data of my friends
36%
Always
23%
I do not think it is
necessary
11%
Sometimes
13%
Often
17%
Figure 12. Analysis of children answers to the question “Do you receive a consent from your friends before
publishing their personal data (photos, information about certain details of their lives) on the Internet”?
The survey indicated that parents and teachers are not willing to publish information related to
children‘s or schoolchildren‘s personal data (their photos, information on certain details of their lives) on the
Internet – 79% of parents and 68% of teachers never do that, 26% of teachers do it sometimes. On the other
hand, 20% of parents often publish personal data of children‘s on the Internet (Figure 13).
43
Always
Teachers
6%
Often
Sometimes
26%
Never
68%
1%
Parents
20%
0%
79%
20%
40%
60%
80%
100%
Figure 13. How often parents and teachers publish information related to their children/schoolchildren
personal data (their photos, information on certain details of their lives) on the Internet.
2.2.3. Understanding threats of disclosure of personal data on the Internet
According to the opinion of respondents on possible threats associated with the personal data disclosure
on the Internet, almost all options were indicated by more than half of respondents. With regard to the most
possible threat associated with the personal data disclosure on the Internet, 72% of children, 79% of parents,
85% of teachers indicated misappropriation of identity in order to make a purchase or perform, for example,
cash transactions on behalf of another person, and 78% of service providers – unsolicited advertising for
commercial purposes (SPAM). 10% of children and 11% of service providers don’t think there are any
threats (Figure 14).
44
Children
Parents
Teachers
Service providers
56%
Misappropriation of identity
72%
Use of personal data for commercial
purposes
56%
60%
52%
56%
53%
55%
Electronic harassment
Unsolicited advertising and commercial
messages (SPAM)
53%
51%
45%
22%
85%
79%
67%
64%
78%
50%
53%
54%
Photos, used for advertising
11%
Don't think there are any threats
1%
3%
1%
4%
Other
0%
10%
11%
20%
40%
60%
80%
100%
Figure 14. Opinion of respondents on possible threats associated with the personal data disclosure on the
Internet.
Answering to the question “Have you ever talked about privacy, personal data and threats associated
with the personal data disclosure on the Internet with the children/schoolchildren?” 91% of teachers and onethird less - 63% of parents said “yes” (taking into account data of Figure 15, teachers fulfill their duties quite
well, whilst it could not be said about parents), 22% of parents and only 3% of teachers said “no”. Anybody
of them didn’t think it’s not important (Figure 15).
45
Yes
No
There was no need as they already knew about it
It's not upon my responsibility
91%
Teachers
3% 6%
1%
Parents
63%
0%
20%
22%
40%
60%
14%
80%
100%
Figure 15. Analysis of the answers of parents and teachers to the question “Have you ever talked on privacy,
personal data and threats associated with the personal data disclosure on the Interne with the
children/schoolchildren?”
Analysis of parents’ and teachers’ answers to the question “Do you think children have enough
knowledge on possible threats associated with the personal data disclosure on the Internet” showed that more
than half of respondents – 50% of parents and even 68% of teachers think that children are not quite aware
about such threats. Only 26% of teachers and 37% of parents said that knowledge is enough (Figure 16).
Yes
Teachers
26%
Parents
Don't know
68%
37%
0%
No
20%
6%
50%
40%
60%
13%
80%
100%
Figure 16. Analysis of parents’ and teachers’ opinion about children knowledge on possible threats
associated with the personal date disclosure on the Internet.
2.2.4. Privacy violations on the Internet
As regards facing violations of using personal data on the Internet, the majority of children said that
they have never experienced indicated cases related to privacy violations on the Internet. The most
experienced case indicated by 19% of children was unwanted proposal received by phone or e-mail. 10% of
respondents said that more than once his/her photo was circulated on the Internet without consent, 5% – that
46
more than once experienced circulation of his/her name, surname, home address and other personal data on
the Internet without his/her consent, and misappropriation of his/her identity (Figure 17).
Yes, more than once
Yes, once
Child received an unwanted proposal by
phone or e-mail
No
19%
Don't know
13%
57%
Having no consent child's photo or video clip
10% 13%
was circulated on the Internet
11%
60%
17%
False information about the child was
6%10%
circulated on the Internet
64%
20%
Child's identity was misappropriated 5% 13%
62%
20%
Having no consent child's name and
surname, home address and etc. was 5%8%
circulated on the Internet
0%
67%
20%
40%
20%
60%
80%
100%
Figure 17. How often did children experience indicated cases.
As regards answers of parents, the majority of parents were not so sure if any of the listed cases had
ever happened to their son/daughter. Evaluating answers “no” and “don’t know” it seems that parents are
quite sure that children’s photo or video clip wasn’t ever circulated on the Internet without consent – 80%
said “no” and only 13% said that don’t know about such cases. Similar situation is with misappropriation of
identity – answers were 79% “no” and 16% “don’t know”. According to parents’ opinion, most experienced
cases are unwanted proposals by phone or e-mail – 12% said that it has happened more than once (Figure
18).
47
Yes, more than once
Yes, once
Child received an unwanted proposal by
phone or e-mail
No
12% 9%
Don't know
48%
31%
4%
Having no consent child's photo or video clip
3%
was circulated on the Internet
80%
13%
5%
False information about the child was
2%
circulated on the Internet
72%
21%
4%
Child's identity was misappropriated 1%
79%
16%
3%
Having no consent child's name and surname,
home address and etc. was circulated on the 1%
Internet
0%
71%
20%
40%
25%
60%
80%
100%
Figure 18. Analysis of the answers of parents to the question „Has your son/daughter ever faced these
cases?”
In respect to the answers of teachers, the majority of them indicated that they are not aware about any
of indicated cases (except circulation of schoolchild photo or video clip on the Internet – 42% said that such
cases are not known). 29% of teachers said that one or more than one case is known when schoolchild’s
photo or video clip was circulated on the Internet without his/her consent. 24% of teachers also knew more
than one case about unwanted proposals received by schoolchild and 15% - about circulation on the Internet
of schoolchild’s name, surname and other personal data without his/her consent (Figure 19).
48
Yes, more than one case is known
Yes, one case is known
Having no consent schoolchild's photo or
video clip was circulated on the Internet
29%
Schoolchild received an unwanted proposal
by phone or e-mail
24%
Having no consent schoolchild's name and
surname, home address and etc. was
circulated on the Internet
29%
42%
9%
67%
79%
15% 6%
False information about the schoolchild was
6% 9%
circulated on the Internet
85%
97%
Schoolchild's identity was misappropriated 3%
0%
No cases are known
20%
40%
60%
80%
100%
Figure 19. Analysis of the answers of teachers to the question „Are you aware of such cases?”
2.3. Protection of Personal Data
2.3.1. Measures to ensure better protection of children‘s personal data on the Internet
The most important data protection measure for parents (73%) and service providers (100%) seems to
be formal and informal education of children, for teachers (59%) – stricter parental control over children, for
children (56%) – propagation of “Safe Internet” idea (this measure is also quite important for service
providers (67%), teachers (47%), parents (39%)). The measure of least significance to children is parental
control over them (17%), to parents, teachers and service providers – better laws (12%, 15% and 0%
respectively). The greater responsibility of website administrators is important for 52% of parents, 43% of
children, 32% of teachers and only for 11% of service providers. 45% of children, 41% of teachers, 33% of
service providers and 28% of parents mentioned personal responsibility of the user (Figure 20).
49
Children
Parents
Teachers
Service providers
100%
41%
Education of children
73%
38%
Propagation of "Safe Internet" idea
39%
56%
44%
Stricter parental control over children
33%
Personal responsibility of the user
28%
22%
11%
45%
32%
43%
52%
22%
24%
21%
29%
Programs blocking websites according to the
keywords
0%
Better laws
Other
41%
41%
39%
38%
Programs limiting browsing on the Internet
Greater responsibility of website
administrators
59%
33%
17%
67%
47%
15%
12%
31%
0%
0%
4%
2%
0%
20%
40%
60%
80%
100%
Figure 20. Which of the measures could ensure better protection of children’s personal data on the Internet.
All service providers which have participated in the survey place a great emphasis on education as a
tool which may best contribute to comprehensive personal data protection on the Internet. All of the
respondents think that educational tools should be improved. The majority of service providers also think that
education, self-regulation needs to be enhanced further. According to the opinion of half of all service
providers, legislative and organizational personal data protection measures are not sufficient and should be
enhanced (Figure 21).
50
Educational
100%
Self-regulation
78%
Legal
56%
Organisational
44%
Technical
22%
Other
0%
0%
20%
40%
60%
80%
100%
120%
Figure 21. Measures which according to service providers should be improved in order to guarantee
comprehensive personal data protection on the Internet
2.3.2. Privacy policy
On the basis of the survey, it should be noted that service providers are concerned about personal data
protection of their website visitors: all service providers participating in the survey, except one, have the
privacy policy for their websites (social networks, chats, dating sites, entertainment portals). The one which
does not have it, plans to introduce it in the future (Figure 22).
Yes I have the privacy policy
89%
I do not have the privacy policy but I plan to
have it in the future
11%
I do not think it is necessary
0%
No, I do not have the privacy policy
0%
0%
20%
40%
60%
80%
100%
Figure 22. Answers of service providers to the question “As a controller of an Internet site, do you have a
privacy policy?”)
51
According to the results of the survey, 24% of children always familiarize themselves with the
website’s privacy policy (how and what for personal data may be used, what are your rights, responsibilities
and etc.) or set privacy settings, 20% of them often do this, 26% - sometimes. 17% never do that. As regards
children’s opinion on necessity to familiarize themselves with the website’s privacy policy or to set privacy
settings, 13% don’t think it’s necessary (Figure 23).
Don't think it's
necessary
13%
Always
24%
Never
17%
Sometimes
26%
Often
20%
Figure 23. Analysis of the answers of children to the question „Do you, when publishing information related
to your own or your friend’s personal data on the Internet, familiarize with the website’s privacy policy (how
and what for personal data may be used, what are your rights, responsibility and etc.) or set privacy
settings?”
In comparison, almost half of respondents among parents and teachers (49% and 47% respectively), i.e.
twice more than children, always familiarize themselves with privacy policy or set privacy settings, 9% of
parents and 15% of teachers do this often, 11% never do that. 17% of teachers (4% more than children) don’t
think it’s necessary, whilst among parents this figure is almost twice as little – only 11% of them think that it
is not necessary (Figure 24).
52
Always
Teachers
Often
Sometimes
47%
Parents
20%
Don't think it's necessary
15%
49%
0%
Never
12%
9%
40%
9%
18%
60%
13%
80%
17%
11%
100%
Figure 24. Analysis of the answers of parents and teachers to the question „Do you, when publishing
information related to your daughter’s/sun’s/schoolchildren’s personal data on the Internet, familiarize with
the website’s privacy policy (how and what for personal data may be used, what are your rights,
responsibility and etc.) or set privacy settings?”
2.3.3. Implementation of rights of data subjects
In respect of answers to the question „Who do you think should familiarize children with the
possible infringements of personal data on the Internet and remedies to avoid them?” 95% of parents,
94% of teachers and 89% of service providers think that this is a duty of parents, 94% of teachers
consider it is to be their obligation. Children do not have such clear opinion – 57% of them think that it
should be done by parents, 58% - by teachers, 54 % think that they should have interest themselves.
Analysis of service providers’ answers showed that almost half - 44% - of them are of the opinion
that teachers should familiarize children with possible infringements of personal data on the Internet and
remedies to avoid them or children should have interest themselves, 33% think that it is the duty of
manager of the website.
As regards other most frequent answers, 54% of parents, 56% of teachers, 37% of children and
33% of service providers indicated it is to be duty of the media, 25% of children and 22% of service
providers think it should be done by State Data Protection Inspectorate.
53
Children
Parents
Teachers
Service providers
89%
94%
95%
Parents
57%
44%
Teachers
58%
33%
37%
22%
Manager of the
website
6%
SDPI*
6%
Friends
Non-governmental
organizations
Other
3%
0%
1%
0%
2%
2%
0%
35%
94%
56%
54%
The media
Children should have
interest themselves
73%
44%
54%
33%
38%
34%
22%
13%
25%
11%
9%
22%
11%
10%
11%
20%
40%
60%
80%
100%
Figure 25. Analysis of the answers to the question „Who do you think should familiarize children with the
possible infringements of personal data on the Internet and remedies to avoid them?”(* - State Data
Protection Inspectorate).
According to the results of the survey, in case of breach of right to the protection of personal data, 33%
of parents and 38% of teachers would firstly contact (or suggest for a schoolchild to do it) State Data
Protection Inspectorate, 28% of parents and 29% of teachers - the manager of the website, 25% and 26%
respectively – the Children’s Right Ombudsman Institution. These three options were the most popular
among respondents. 10% of parents indicated other institution (4 of 11 respondents indicated police) (Figure
26).
54
Parents
Teachers
SDPI*
33%
29%
28%
Manager of the website
26%
25%
CROI**
Court
3%
3%
Other institution
3%
Would not contact anybody
38%
10%
0%
1%
0%
10%
20%
30%
40%
Figure 26. Analysis of parents’ and teachers’ answers to the question “Whom would you firstly contact
yourself (or recommend for a schoolchild to contact) in case his/her right to the protection of personal data
was breached?” (*- State Data Protection Inspectorate; ** - Children’s Rights Ombudsman Office).
The results of the survey showed that data subjects are not very active in exercising their rights. The
service providers indicated that they have never received data subjects’ complaints or requests to provide the
information on how their personal data was processed, the sources or purpose of processing. Furthermore, no
data subjects asked to withdraw their consent of the processing of their personal data. 33% of service
providers indicated that they have received requests to destroy or terminate processing of personal data from
data subjects and only one service provider specified that he was asked to rectify the personal data published
on its website (Figure 27).
55
No data subject referred to me yet
56%
To erase his personal data or terminate any
operations of processing upon personal data
33%
To correct inaccurate, incomplete or
incorrect personal data
11%
Willing to withdraw the consent to process
0%
his personal data
To explain the purposes for which his
0%
personal data are collected
To provide information from which sources
and which personal data are collected and 0%
processed
0%
20%
40%
60%
Figure 27. Data subjects’ requests to service providers
2.4. Conclusions
2.4.1. Internet Usage
2.4.1.1. Children activities on the Internet
As regards activities performed on the Internet, the most popular ones are downloading music,
films and etc. (39% of children do it every day, 37% - several times a week), and collecting information
(22% do it every day, 45% - several times a week). The survey also showed that 20% of children load
(circulate) information about himself/herself or his/her friends on the Internet, 19% chat with unknown
person several times a week. Taking into account that such activities could lead to very serious
infringements of children’s rights or even crimes, it is very important that children knew possible
consequences and rules they should respect in order to avoid such breaches.
31% of parents don’t know whether their children chat with unknown persons and 22% are
not aware whether they load (circulate) information about themselves or their friends on the
56
Internet. In conclusion, it could mean that they have never been interested in or their children
don‘t want to talk with them about it.
2.4.1.2. Usage of social networks
According to the survey results, social networks are widely used by children, parents and teachers as
well. 53% of respondents among children daily use international social network Facebook, and 21% use
Lithuanian website One.lt or other social networks or dating websites. The majority of adults (65% of
teachers and 53% of parents use Lithuanian website Klase.lt, 53% and 58% respectively use Facebook) use
social networks or dating sites, so they should be quite aware about the peculiarities of such types of
websites, but it is also important that they were concerned with possible threats to privacy. Taking into
account such widespread usage of social networks among children, it is very important that children knew
possible dangers they are faced with and how to use tools provided by controllers of these websites in
order to protect privacy. On the other hand, controllers of such websites should take appropriate actions
to limit the risks with regard to children.
2.4.2. Personal Data
2.4.2.1. Understanding personal data
The answers to the question “What, in your opinion, is personal data?” disclosed great difference
between the opinions of respondents (children, parents and teachers) – from 17% to 97%. Taking into
account that all categories of data – even school name, if it would be related to particular person (for
example, schoolchild, teacher) whose identity could be directly or indirectly revealed - are personal data,
awareness of children, parents and teachers concerning definition of personal data should be raised. The
same could be said about opinion of respondents on possible threats associated with the personal data
disclosure on the Internet.
2.3.2.2. Publication of personal data on the Internet
The results showed that the majority of children (more than 70%) never share their personal
identification number, home address and information related to their religion and illnesses. On the other
hand, the most revealed personal data appeared to be name and surname (92%) and email address (87%).
57
Worrying is the fact that children rarely question the necessity to provide correct personal data
when they register on various Internet websites. Almost half (45%) of the children always or often
provide correct information during the registration process on Internet websites and even 55% always or
often say truth to those with whom they socialize.
Other unadvisable behavior on the Internet is publication of personal data of other people –
more than 60% of children are engaged in this activity and only 1/3 of them always receive consent of
a person concerned.
20% of parents often publish information related to their children on the Internet, but only 49% of them
always familiarize themselves with the website’s privacy policy or set privacy settings. It means that
awareness of adults about necessity to get acquainted with privacy policy and set privacy settings should be
raised.
2.4.2.3. Understanding threats of disclosure of personal data on the Internet
As regards opinion of respondents on possible threats associated with the personal data disclosure
on the Internet, almost all options were indicated by more than half of respondents. 85% of teachers,
79% of parents and 72% of children indicated misappropriation of identity in order to make a purchase or
perform, for example, cash transactions on behalf of another person as the most possible threat, and 78%
of service providers – unsolicited advertising for commercial purposes (SPAM). Worrying is the fact
that 10 % of children don’t think there are any threats.
Parents nor teachers don’t think it’s not important to talk about privacy, personal data and threats
associated with the personal data disclosure on the Internet with the children/schoolchildren, so it is very
important that they have enough knowledge and provide children with correct information, especially
taking into account that 50% of parents and even 68% of teachers think that children are not quite aware
about such threats.
2.4.2.4. Privacy violations on the Internet
As regards to facing violations of using personal data on the Internet, the majority of children said
that they have never experienced indicated cases related to privacy violations on the Internet. The most
experienced case is receiving unwanted proposals – 19% of children more than once received unwanted
proposals by phone or e-mail. 10% said that more than once his/her photo was circulated on the Internet
without his or her consent.
58
It seams that parents do not have enough information about threats their children are facing
on the Internet. As it was already mentioned, 10% of children said that more than once their photos or
videos were circulated on the Internet without their consent, but only 3% of parents indicated that they
knew about more than one of such cases. In respect to answers of teachers, 29% said that one or more
than one of such cases is known to them. Similar situation is with all indicated cases, so in conclusion,
teachers are more aware about violations of data protection and privacy of schoolchildren on the
Internet. It could mean that teachers are more interested in schoolchildren‘s activities on the Internet, or
that children are more linked to talk about it with teachers than with parents.
2.4.3. Protection of Personal Data
2.4.3.1 Measures to ensure better protection of children’s personal data on the Internet
The most important data protection measure for parents (73%) and service providers (100%) seems to
be formal and informal education of children, for teachers (59%) – stricter parental control over children, for
children (56%) – propagation of “Safe Internet” idea (this measure is also quite important for service
providers – 67%, teachers – 47%, parents – 39%). Taking into account that all of the respondents think that
educational tools should be improved, great attention has to be paid to elaborating formal and informal
education, propagating „Safe Internet“ idea and strengthening understanding of personal
responsibility of users. Adults should be informed how to use programs limiting children’s activity on
the Internet.
The majority of service providers also advice to enhance self-regulation (78%), legislative (56%)
and organizational (44%) personal data protection measures.
2.4.3.2 Privacy policy
The study has shown that service providers are quite knowledgeable and concerned about personal
data protection of their website visitors. Although according to the Lithuanian data protection laws, service
providers are not directly obliged to have a privacy policy (when the privacy policy differs from the personal
data processing rules) and to publish it on the website, all of the service providers participating in the survey,
except one, have the privacy policy for their websites.
According to the survey results, it seems that children don’t understand the necessity to familiarize
themselves with privacy policy – 26% do it only sometimes, 17% never do it and 13% don’t even think it is
necessary. Children have to be informed that in order to ensure personal data and privacy protection
59
on the Internet, they should always familiarize themselves with privacy policy and select appropriate
privacy settings. It is also very important that they understand the necessity and meaning of these actions.
2.4.3.3 Implementation of rights of data subjects
The results of the survey show that data subjects implement their rights very passively. The few
requests which service providers received from data subjects included the request to destroy or terminate
the processing of personal data and to rectify the personal data published on the website. According to
the survey data subjects have never tried to use their other data protection rights, such as to
receive information about processing of their personal data by the service provider, to withdraw
the consent for the processing, etc.
With regard to obligation to familiarize children with the possible infringements of personal data
on the Internet and remedies to avoid them the vast majority of adults - 95% of parents, 94% of teachers
and 89% of service providers think that this is a duty of parents. 94% of teachers consider it is to be their
obligation. Children do not have such clear opinion – 57% of them think that it should be done by
parents, 58% - by teachers, 54 % think that they should have interest themselves.
Those who are directly involved in children‘s activities on the Internet and their everyday life
(managers of websites, parents, teachers) should have primary obligation to familiarize children
with the possible infringements of personal data on the Internet and remedies to avoid them.
Media, state institutions, such as State Data Protection Inspectorate and others, NGO’s also have to play
their role in this field. In order for these activities to be effective, children should have great interest
themselves.
60
Appendix I. Questionnaires
These questionnaires were prepared in Lithuanian language and translated into English. The English
translation was adapted in Italy to local context.
QUESTIONNAIRE FOR CHILDREN
1. What, in your opinion, is personal data?
[An unlimited number of answers are allowed]
name, surname
father's name
photo
e-mail address
mobile phone number
information related to person’s religious beliefs
information related to health
personal code
home address
school name
2. How often do you use these social networks, dating sites?
[Tick one answer in each row]
Every
day
One.lt
Frype.lt
Klase.lt
Draugas.lt
MySpace
LinkedIn
Twitter
Facebook
Pazintys.lt
Other
Several
times a week
Once a
month
Several
times a
year
Do not
use
3. How often do you carry out these activities on the Internet:
[Tick one answer in each row]
Every
day
Sever
al
Once a
month
Several
times a
I don’t
do this
61
times
a
week
Collect information on the
Internet
Load (circulate) information
about himself/herself or his/her
friends (photos, video clips,
text messages and etc.)
Chatting with the unknown
person on the Internet
Download music, films and
etc.
Other (specify)
year
at all
4. Do you provide correct personal data – name, surname, date of birth, etc. – when registering in
various sites on the Internet?
Always
Often
Sometimes
Never
If I am asked to provide my personal data I do not register
5. While communicating on the Internet (for ex. in social networks or dating sites) do you provide
correct (unfabled) information about yourself for those with whom you socialise?
Always
Often
Sometimes
Never
6. Do you, when publishing information related to your own or your friend’s personal data on the
Internet, familiarize with the website’s privacy policy (how and what for personal date may be used,
what are your rights, responsibility and etc.) or set privacy settings
□
□
□
□
□
Always
Often
Sometimes
Never
I don’t think it’s necessary
7. What are possible threats associated with the personal date disclosure on the Internet:
[3 possible response options]
62
Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on
behalf of another person
use of personal data for commercial purposes
electronic harassment to intimidate another person or to cause tension
unsolicited advertising and commercial messages (SPAM)
photos, used for advertising or placed in erotic websites
I don’t think there are any threats
Other (please specify)____________________________________________________
8. Who do you think should familiarize children with the possible infringements of personal data on
the Internet and remedies to avoid them?
[Select 3 most important response options]
Parents
Friends
Teachers
Children should have interest themselves
The media
Non-governmental organizations
State Data Protection Inspectorate
Manager of the website
Other (specify)
9. Do you receive a consent from your friends before publishing their personal data (photos,
information about certain details of their lives) on the Internet?
Always
Often
Sometimes
I do not think it is necessary
I do not publish data of my friends
10. Have you ever experienced such cases:
[Tick one answer in each row]
Yes, more
than once
Having no consent your photo
or video clip about you was
circulated on the Internet
Having no consent your name
and surname, home address,
Yes, once
No
This has
happened to my
friends
63
mobile phone number and etc.
was circulated on the Internet
False information about you
was circulated on the Internet
Your identity was
misappropriated by the
unknown person on the Internet
You received an unwanted
proposal by phone or e-mail
from the unknown person
11. Which information about yourself do you provide in Internet sites?
[Tick one answer in each row]
Always
Often
Sometimes
Never
Name and surname
Telephone number
e-mail address
ID number
Home address
School name
Illnesses you have
Your faith
Extracurricular activity
groups
12. Which measures could ensure better protection of children’s personal data on the Internet?
[choose 3 most important answers]
Formal
and informal education of children, awareness-raising campaigns
of ‘Safe Internet’ idea
Programs limiting browsing on the Internet according to the keywords
Better laws
Greater responsibility of website administrators
Personal responsibility of the user
Stricter parental control over children
Other (please specify)
Propagation
13. Your age
13 – 14 years old
15 – 16 years old
64
17 – 18 years old
14. You are:
Male
Female
15. Your living place is:
Vilnius
Kaunas, Klaipėda, Šiauliai, Panevėžys
Another city
Country-side area
65
QUESTIONNAIRE FOR PARENTS
1. What, in your opinion, is personal data?
[An unlimited number of answers are allowed]
name, surname
father's name
photo
e-mail address
mobile phone number
information related to person’s religious beliefs
information related to health
personal code
home address
school name
2. Which of these social networks / dating sites are you a registered user:
One.lt
Frype.lt
Klase.lt
Draugas.lt
MySpace
LinkedIn
Twitter
Facebook
Pazintys.lt
Supermama.lt
Other
I do not register
3. Do you publish information related to your daughter’s/son’s personal data (their photos,
information on certain details of their lives) on the Internet?
□
□
□
□
Always
Often
Sometimes
Never
4. Do you, when publishing information related to your daughter’s/son’s personal data on the Internet,
familiarize with the website’s privacy policy or set privacy settings
□
□
□
□
□
Always
Often
Sometimes
Never
I don’t think it’s necessary
66
5. How often do your children carry out these activities on the Internet:
[Tick one answer in each row]
Every
day
Collect information on the
Internet
Load (circulate) information
about himself/herself or
his/her friends (photos, video
clips, text messages and etc.)
Chatting with the unknown
person on the Internet
Download music, films and
etc.
Other (specify)
Sever
al
times
a
week
Once in a
month
Several
times a
year
They
don’t do
this
I don’t
know
6. Do you think children have enough knowledge on possible threats associated with the personal date
disclosure on the Internet:
□ Yes
□ No
□ I don’t know
7. What are possible threats associated with the personal date disclosure on the Internet:
[3 possible response options]
Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on
behalf of another person
use of personal data for commercial purposes
electronic harassment to intimidate another person or to cause tension
unsolicited advertising and commercial messages (SPAM)
photos, used for advertising or placed in erotic websites
I don’t think there are any threats
Other (please specify)____________________________________________________
8. Have you ever talked on privacy, personal data and threats associated with the personal date
disclosure on the Interne with your children?
67
Yes
No
I don‘t think it‘s important
There was no need as they already knew about it
It‘s not upon my responsibility
9. Who do you think should familiarize children with the possible infringements of personal data on
the Internet and remedies to avoid them?
[Select 3 most important options]
Parents
Friends
Teachers
Children should have interest themselves
The media
Non-governmental organizations
State Data Protection Inspectorate
Manager of the website
Other (specify)
10. Has your son/daughter ever faced these cases?
[Tick one answer in each row]
Yes, more
than once
Having no consent photo or
video clip of your child was
circulated on the Internet
Having no consent name and
surname, home address, mobile
phone number and other
personal data of your child was
circulated on the Internet
False information about your
child was circulated on the
Internet
Your child’s identity was
misappropriated by the
unknown person on the Internet
An unwanted proposal was
received by phone or e-mail
from the unknown person by
your child
Yes, once
No
Don’t know
68
11. Whom would you firstly contact in case your son’s/daughter’s right to the protection of personal
data was breached:
[Choose one the most important response option]
Manager of the website
State Data Protection Inspectorate
Court
Children’s Rights Ombudsman Institution
Other institution (please specify)
I would not contact nobody, because it is not upon my responsibility
12. Which of the measures could ensure better protection of childrens’ personal data on the Internet?
[Choose 3 most important response options]
Formal
and informal education of children, awareness-raising campaigns
of ‘Safe Internet’ idea
Programs limiting browsing on the Internet according to the keywords
Better laws
Greater responsibility of website administrators
Personal responsibility of the user
Stricter parental control over children
Other (please specify)
Propagation
13. You are:
Male
Female
14. Your living place is:
Vilnius
Kaunas, Klaipėda, Šiauliai, Panevėžys
Another city
Country-side area
15. Your education:
□ University, uncompleted university
□ Secondary, specialised secondary
□ Uncompleted secondary
16. You are:
30 years old or younger
31-40 years old
41-50 years old
51 years old or older
69
QUESTIONNAIRE FOR TEACHERS
1. What, in your opinion, is personal data?
[An unlimited number of answers are allowed]
name, surname
father's name
photo
e-mail address
mobile phone number
information related to person’s religious beliefs
information related to health
personal code
home address
school name
2. Which of these social networks / dating sites are you a registered user:
One.lt
Frype.lt
Klase.lt
Draugas.lt
MySpace
LinkedIn
Twitter
Facebook
Pazintys.lt
Supermama.lt
Other
I do not register
3. Do you publish information related to schoolchildren’s personal data (their photos, information on
certain details of their lives) on the Internet?
□
□
□
□
Always
Often
Sometimes
Never
4. Do you, when publishing information related to schoolchildren’s personal data on the Internet,
familiarize with the website’s privacy policy or set privacy settings
□
□
□
□
□
Always
Often
Sometimes
Never
I don’t think it’s necessary
70
5. Do you think children have enough knowledge on possible threats associated with the personal date
disclosure on the Internet:
□
□
□
Yes
No
I don’t know
6. What are possible threats associated with the personal date disclosure on the Internet:
[3 possible response options]
Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on
behalf of another person
use of personal data for commercial purposes
electronic harassment to intimidate another person or to cause tension
unsolicited advertising and commercial messages (SPAM)
photos, used for advertising or placed in erotic websites
I don’t think there are any threats
Other (please specify)____________________________________________________
7. Have you ever talked on privacy, personal data and threats associated with the personal data
disclosure on the Interne with the schoolchildren?
Yes
No
I don‘t think it‘s important
There was no need as they already knew about it
It‘s not upon my responsibility
8. Who do you think should familiarize children with the possible infringements of personal data on
the Internet and remedies to avoid them?
[Select 3 most important response options]
Parents
Friends
Teachers
Children should have interest themselves
The media
Non-governmental organizations
State Data Protection Inspectorate
Manager of the website
Other (specify)
71
9. Are you aware of such cases?
[Tick one answer in each row]
Yes, more
than one
case is
known
Having no consent of the child
(his/her parents) schoolchild’s
photo or video clip was
circulated on the Internet
Having no consent of the child
(his/her parents) schoolchild’s
name and surname, home
address, mobile phone number
and etc. was circulated on the
Internet
False information about the
schoolchild was circulated on
the Internet
Schoolchild’s identity was
misappropriated by the
unknown person on the Internet
An unwanted proposal was
received by phone or e-mail
from the unknown person by the
schoolchild
Yes, one
case is
known
No cases
are
known
This has
happened to my
son/daughter
10. Which of the measures could ensure better protection of children’s personal data on the Internet?
[Choose 3 most important response options]
Formal
and informal education of children, awareness-raising campaigns
of ‘Safe Internet’ idea
Programs limiting browsing on the Internet according to the keywords
Better laws
Greater responsibility of website administrators
Personal responsibility of the user
Stricter parental control over children
Other (please specify)
Propagation
11. Whom would you firstly contact yourself or recommend for a schoolchild to contact in case his/her
right to the protection of personal data was breached:
[Choose one the most important response option]
Manager of the website
State Data Protection Inspectorate
72
Court
Children’s Rights Ombudsman Institution
Other institution (please specify)
I would not contact nobody, because it is not upon my responsibility
12. You are:
Male
Female
13. Your living place is:
Vilnius
Kaunas, Klaipėda, Šiauliai, Panevėžys
Another city
Country-side area
14. What is the education institution that you work for:
□ Pre-primary school
□ Primary school
□ Basic school
□ Secondary school
□ Gymnasium
□ Vocational training school
You are:
30 years old or younger
31-40 years old
41-50 years old
51 years old or older
73
QUESTIONNAIRE FOR DATA CONTROLLERS
1. To which group of data controllers do you belong?
Social network controller
Dating site controller
Chat controller
Recreational site
Other (please specify)
2. Please indicate how many people visit your website every day?
not more than 1000
1001-10000
10001-50000
50001-100000
more than 100001
3. How many percent of your site’s visitors constitute children from 13 to 18 years old?
not more than 5 %
6 % -10 %
11 % -20 %
21 % -30 %
31 % -50 %
more than 51 %
4. Which measures could ensure better protection of children’s personal data on the Internet?
[choose 3 most important response options]
Formal
and informal education of children, awareness-raising campaigns
Propagation of ‘Safe Internet’ idea
Programs limiting browsing on the Internet according to the keywords
Better laws
Greater responsibility of website administrators
Personal responsibility of the user
Stricter parental control over children
Other (please specify)
5. What are possible threats associated with the personal date disclosure on the Internet:
[choose 3 most important response options]
Misappropriation of identity in order to make a purchase or perform, for example, cash transactions on
behalf of another person
use of personal data for commercial purposes
electronic harassment to intimidate another person or to cause tension
74
unsolicited advertising and commercial messages (SPAM)
photos, used for advertising or placed in erotic websites
I don’t think there are any threats
Other (please specify)____________________________________________________
6. According to your opinion, which measures specified below are insufficient and should be improved
in order to guarantee comprehensive personal data protection on the Internet:
[choose 3 most important response options]
legal
technical
organisational
educational
self-regulation
other (please specify)
7. As a controller of an internet site, do you have a privacy policy?
Yes I have
No, I do not have
I do not have but I plan to have it in the future
I do not think it is necessary
8. Mostly people refer to you asking:
[3 possible response options]
to provide information from which sources and which personal data are collected and processed
to explain the purposes for which his personal data are collected
to correct inaccurate, incomplete or incorrect personal data
to erase his personal data or terminate any operations of processing upon personal data
willing to withdraw the consent to process his personal data
no data subject referred to me yet
9. Who do you think should familiarize children with the possible infringements of personal data on
the Internet and remedies to avoid them?
[choose 3 most important response options]
Parents
Friends
Teachers
Children should have interest themselves
The media
Non-governmental organizations
75
State Data Protection Inspectorate
Manager of the website
Other (specify)
76